# CVEs published 2010-12-23 10 CVEs were published on December 23, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-3881](https://cve.now/CVE-2010-3881.md): arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain pot (no CVSS) - [CVE-2010-3972](https://cve.now/CVE-2010-3972.md): Heap-based buffer overflow in the TELNET\_STREAM\_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet (no CVSS) - [CVE-2010-3973](https://cve.now/CVE-2010-3973.md): The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP (no CVSS) - [CVE-2010-4519](https://cve.now/CVE-2010-4519.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x bef (no CVSS) - [CVE-2010-4520](https://cve.now/CVE-2010-4520.md): Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbi (no CVSS) - [CVE-2010-4521](https://cve.now/CVE-2010-4521.md): Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2010-4588](https://cve.now/CVE-2010-4588.md): The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute (no CVSS) - [CVE-2010-4597](https://cve.now/CVE-2010-4597.md): Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Int (no CVSS) - [CVE-2010-4598](https://cve.now/CVE-2010-4598.md): Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2010-4599](https://cve.now/CVE-2010-4599.md): Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-12-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.